Director Penalty Notices and GST: When Company GST Debts Become a Director’s Personal Liability
Most directors assume the corporate structure insulates them from their company’s tax debts. That assumption is wrong, and for directors of companies carrying unpaid GST, it can be financially devastating.
Since 2012, the director penalty notice GST regime has given the Australian Taxation Office a direct pathway to hold directors personally liable for their company’s unpaid goods and services tax, PAYG withholding, and superannuation guarantee charges. Yet more than a decade on, the full reach of these rules remains poorly understood, particularly the lockdown provisions that eliminate every exit strategy once a company falls behind on both paying and lodging its BAS obligations.
This analysis unpacks how the director penalty regime applies to GST liabilities, why historical arrears can resurface as personal debts years later, and how the ATO’s estimation powers can crystallise liability without warning. It also covers the critical 30-day window for new directors, the compressed timelines arriving with Sameday Super from July 2026, and the practical steps directors must take now to protect their personal assets before a penalty notice lands on their doorstep.
What Is a Director Penalty Notice?
A director penalty notice (DPN) is a formal written notice issued by the Australian Taxation Office that makes a company director personally liable for certain unpaid tax obligations of the company. Once issued, the ATO can pursue the director’s personal assets, including property, savings and investments, to recover the nominated debt.
The DPN regime does something that company law ordinarily prevents: it pierces the corporate veil. The limited liability protection that a company structure provides exists precisely to separate a director’s personal finances from the company’s obligations. A DPN removes that separation for the liabilities it covers, treating the company’s unpaid tax as the director’s personal debt.
The regime was originally introduced to address non-compliance with PAYG withholding obligations, reflecting the view that directors should not be permitted to fund business operations by withholding tax from employees’ wages and failing to remit it to the ATO. That original scope was significantly expanded in 2012, when the Tax Laws Amendment (2012 Measures No. 2) Act extended the regime to cover GST liabilities and superannuation guarantee charges (SGC). The three-limbed personal liability regime that exists today, covering PAYG withholding, GST, and SGC, dates from that amendment.
The ATO does not issue DPNs at the first sign of non-compliance. Collection activity typically precedes the decision to issue a notice. However, directors frequently remain unaware of their personal exposure until the notice arrives, particularly where a company’s tax affairs have been handled by an accountant or bookkeeper without direct director oversight, or where a director joined a company that already carried historical arrears.
That gap between when liability crystallises and when a director discovers it is where much of the practical danger lies. The full mechanics of director penalty liability, including how the two distinct DPN types operate, are examined in the sections that follow.
How GST Became Part of the Director Penalty Regime
Before the 2012 amendment, the director penalty regime applied exclusively to PAYG withholding obligations. The 2012 amendment reflected a policy judgment that the compliance pressure director liability creates should extend to GST and SGC, not only PAYG withholding.
The expansion brought GST liabilities a company is required to remit under the regime within the scope of potential director liability. This is broader than many directors appreciate. It is not limited to egregious or long-running non-compliance; a single missed BAS period can, under the right circumstances, give rise to a director penalty notice for GST.
What makes the GST extension particularly problematic is awareness, or the lack of it. Directors of companies carrying historical GST arrears are frequently unaware the exposure exists. This is especially common where a director was appointed after the arrears arose, or where the company’s tax compliance was managed entirely by an accountant or bookkeeper without direct director involvement. The regime does not require that a director knew about the unpaid GST; the liability is statutory and attaches to the office.
More than a decade after the 2012 amendment, the GST dimension of the director penalty regime remains poorly understood. For directors with companies experiencing ATO debt enforcement activity, personal GST exposure is often already present before a notice arrives.
The Two Types of DPN: 21-Day Notices and Lockdown Notices
Understanding that personal liability exists is only part of the picture. The critical question for any director receiving a DPN is which type of notice they are holding, because the two operate entirely differently and the available responses are not interchangeable.
The 21-Day DPN
A 21-day DPN issues where the company has failed to pay the relevant liability but has lodged the relevant BAS or return within three months of the due date. In that situation, the director retains options. Within 21 days, they can pay the debt in full, appoint a voluntary administrator, or have a liquidator appointed. Any of those actions will discharge the personal liability. The 21-day window is genuinely navigable, provided the director acts immediately.
One point that catches directors out: the 21-day period runs from the date the notice is posted, not the date it is received. Postal delays, redirected mail, or a director who is travelling can silently consume days from an already short window. If you receive a DPN, treat the clock as already running.
The Lockdown DPN
A lockdown DPN issues where the company has failed both to pay and to lodge the BAS or return within three months of the due date. Once that notice issues, no action by the director can extinguish the personal liability. Paying the debt, appointing an administrator, placing the company in liquidation: none of these steps removes the director’s personal exposure. The liability is fixed.
This is the mechanism that makes the three-month BAS lodgement deadline a structural tripwire. A company that has simply failed to pay, but kept its lodgements current, leaves its director in a manageable position. A company that has also failed to lodge within three months converts that same situation into one with no exit. The difference is not the amount owing; it is whether reporting obligations were met.
Directors receiving any DPN should determine immediately, and if necessary with legal assistance, whether it is a 21-day or lockdown notice. Guidance on what to do in each scenario is covered in Received a Director Penalty Notice? What Every Australian Company Director Needs to Know. The response strategies differ entirely, and the time available to act is limited from the moment the notice leaves the ATO.
Lockdown DPNs: Why There Is No Way Out
The point that most frequently catches directors off-guard is this: many assume that placing a company into voluntary administration or liquidation resolves all personal tax exposure. That assumption is wrong where lockdown conditions have already been met. Insolvency proceedings do not unwind a lockdown DPN. More significantly, the ATO can issue a lockdown DPN after a company has entered voluntary administration or liquidation, meaning that insolvency proceedings already underway offer no protection against a notice that has not yet arrived.
The exposure often builds silently. A company with a pattern of late lodgement or chronic non-lodgement accumulates lockdown DPN exposure without any visible warning to the director. By the time financial difficulty becomes apparent, the conditions for a lockdown DPN may have been satisfied for months or years. The notice, when it arrives, is the consequence of a historical compliance failure, not a new event.
Once a lockdown DPN has issued, the director’s practical options narrow to three:
- Disputing the underlying liability if the amount is incorrect or has been estimated by the ATO
- Challenging the validity of the notice itself on procedural or legal grounds
- Identifying any statutory defences that may apply to the specific circumstances
None of these pathways are straightforward, and each involves procedural requirements with strict timeframes. A director in this position should obtain independent legal advice from a taxation lawyer promptly. Delay does not preserve options; it closes them.
Historical GST Arrears: Liability That Follows Directors Across Time
The lockdown provisions described above create irreversible liability for directors already in office. A separate but equally serious risk applies to directors who were in office when arrears accumulated, and to those who join a company after the arrears arose.
A director’s exposure is assessed by reference to the period during which the relevant liabilities arose, not merely the date on which the ATO issues a formal notice. A director who resigned years before a DPN issues can still face personal liability for arrears that accumulated during their tenure.
The 30-Day Grace Period for New Directors
A new director who accepts an appointment into a company carrying unresolved GST or PAYG arrears has a 30-day grace period from their date of appointment. Within that window, they must identify the arrears and take steps to address them. If they do not, the grace period expires and they become personally liable for the pre-existing obligations as though those liabilities were their own.
Thirty days is a narrow window, particularly where the company’s tax history has not been clearly disclosed. A new director who enters without knowing the arrears exist may exhaust the grace period before they have even identified the problem.
Due Diligence Before Accepting an Appointment
This is why pre-appointment due diligence must go beyond financial statements. Reviewing BAS lodgement history, confirming outstanding ATO liabilities, and asking directly whether any DPNs have been issued or are likely to issue are not optional steps. Vendors and existing directors do not always disclose these liabilities voluntarily, and the consequences of missing them fall entirely on the incoming director. Tax compliance history is as important to review as any other aspect of a company’s financial position; directors considering appointments to companies with complex histories should also consider how those obligations interact with opportunities and obstacles for corporations more broadly.
ATO Estimation Powers and the Lockdown DPN Risk You Cannot See Coming
The due diligence considerations for new directors sit alongside a less visible but equally serious risk: the ATO does not need a company to lodge a BAS before it can move against a director personally.
Under the lockdown DPN provisions, the ATO has explicit power to estimate a company’s unpaid GST, PAYG withholding, and SGC obligations without waiting for any lodgement to occur. Single Touch Payroll data, which the ATO receives directly from employers with each pay run, gives the ATO a real-time picture of payroll activity. Where BAS lodgements have lapsed and remittances have not been made, the ATO can use that data to form an estimate of the liability, issue a DPN based on that estimate, and serve it on the director, all without the director having any prior warning that the process was underway.
This is the aspect of ATO enforcement powers that directors most frequently underestimate. The absence of a formal assessment, a debt notice, or even a lodged return is not a reliable signal that no liability is crystallising. The ATO may already be building an estimate from payroll data it holds, and the first indication a director receives may be the DPN itself.
Directors who know that BAS lodgements are overdue or that GST remittances have not been made should not treat that knowledge as the beginning of a comfortable window before the ATO acts. The ATO was issuing 30 to 40 DPNs daily as of May 2022, and enforcement activity has continued to scale since then. The assumption that inaction buys time is not supported by how the ATO administers this regime in practice.
Where a director believes an ATO estimate is incorrect, objection and review mechanisms do exist. However, those pathways require prompt action and a precise understanding of the legislative basis on which the estimate was made. This is not territory where a director should proceed without legal advice. A taxation lawyer can identify whether the estimate has a proper foundation, advise on the applicable timeframes, and assist in preparing a response that preserves the director’s position.
Sameday Super From 1 July 2026: A Compressed Liability Window for SGC
The ATO’s estimation powers create one category of invisible exposure. From 1 July 2026, a separate compressed timeline applies specifically to superannuation, and it deserves direct attention.
Under the Payday Super regime, companies will be required to pay superannuation guarantee contributions within 7 business days of paying wages, replacing the previous quarterly payment cycle. That shift fundamentally changes the rhythm of compliance and, with it, the speed at which director personal liability for unpaid SGC can crystallise.
Under the new framework, a director’s personal liability for unpaid SGC arises at the earlier of 60 days after the wages were paid or the date the ATO issues an estimate of the liability. There is no longer a quarterly window in which a shortfall might be identified and remedied before personal exposure attaches. A missed superannuation payment made in July could generate a director penalty liability by September, without the director having received any formal notice in the interim.
This compression carries particular risk in companies where payroll and treasury functions operate independently of direct director oversight. Where a director relies on finance staff or external payroll providers to manage superannuation payments, the 7-business-day payment window may close, and the 60-day liability clock may begin running, before the director has any awareness that a payment was missed. The ATO’s ability to estimate liability using Single Touch Payroll data means the agency may act before internal reporting catches the gap.
Directors should treat the 1 July 2026 commencement date as a prompt to review their company’s superannuation payment processes now. Payroll systems, payment authorisation workflows, and reporting lines to directors all warrant examination. The broader superannuation compliance environment is also shifting in other ways; directors managing significant superannuation balances may also wish to review how to prepare for Division 296 super tax as part of that broader review.
When a Director Must Act Urgently to Protect Personal Assets
The compressed SGC timelines introduced by Sameday Super make the broader point unavoidable: across GST, PAYG withholding and superannuation, the windows for director action are narrow and shrinking.
The 21-day clock starts when the ATO posts the notice, not when it lands in your letterbox. A director who receives a 21-Day DPN and assumes the deadline runs from the date of receipt may already have lost days. Once 21 days from posting has elapsed, the options to pay in full, appoint a voluntary administrator, or have a liquidator appointed no longer extinguish personal liability. As explained above, a lockdown DPN removes those responses entirely from the outset.
Waiting for a DPN to arrive is the wrong trigger for action. A director who already knows that BAS lodgements are more than three months overdue, or that GST or PAYG remittances have not been made, is already in lockdown DPN territory. The ATO does not need to have issued a notice for the exposure to exist. By the time the letter arrives, the practical options may have already closed.
The correct trigger is awareness of non-compliance. If a director becomes aware that the company is not lodging on time or not meeting its GST or PAYG obligations, that is the moment to act, not the moment a formal notice arrives.
Directors who believe a DPN has been incorrectly issued, that an ATO estimate is wrong, or that a statutory defence may apply under Division 269 of Schedule 1 to the Taxation Administration Act 1953 (Cth) should not delay. If you are uncertain what to do after the ATO contacts your company or issues a notice, understanding what options are available when the ATO contacts you is a reasonable starting point. Legal advice from a taxation lawyer should follow promptly, because the window to assert a defence or contest an estimate is not open-ended.
Defences, Objections, and the Tax Ombudsman Review
If urgent action is the first priority when a DPN arrives, understanding the available defences and review pathways is the second.
The legislation provides limited statutory defences, including grounds relating to a director’s inability to participate in management and the steps taken to address non-compliance. These defences are narrow in practice and require demonstrable action.
Where a defence on the merits is not available, a director who believes a DPN has been incorrectly issued, or that the underlying liability has been wrongly estimated by the ATO, can object to the relevant assessment. Both internal review and external review are available, including application to the Administrative Review Tribunal. Directors disputing an ATO estimate of unpaid GST or PAYG should note that time limits apply to objections; missing those deadlines can close off formal review rights entirely. Understanding objections and review rights before those windows close is important.
Separately from the merits, a director who considers the ATO’s conduct in issuing a DPN was procedurally irregular or unfair may have grounds to raise those concerns through the Inspector-General of Taxation and Tax Ombudsman. Significantly, the Tax Ombudsman has an active review of the ATO’s administration of Director Penalty Notices underway in 2026, with public feedback closing 29 September 2026. The existence of that review signals that systemic concerns about how DPNs are issued and administered have been formally identified at the ombudsman level. Complaints to the Ombudsman operate separately from any objection on the substance of the liability.
Every pathway described here carries its own procedural requirements and timeframes. A director who delays, or who pursues the wrong avenue first, may find that the more appropriate avenue has since closed.
Practical Steps Directors Should Take Now
Understanding the defences and review pathways is only useful if a director acts before those avenues close. The steps below address what directors should do now, regardless of whether a DPN has issued.
Review the company’s ATO account and lodgement history. Any company with a history of late BAS lodgements, unpaid GST, PAYG withholding arrears, or missed superannuation payments carries live DPN exposure. Directors should obtain a full view of the company’s ATO account, confirm all BAS lodgements are current, and identify any outstanding liabilities before the ATO acts first.
New directors must conduct pre-appointment due diligence on BAS lodgement history and any outstanding GST, PAYG, or SGC liabilities. Existing arrears are not always disclosed voluntarily, and the 30-day grace period from appointment is the only window available to address pre-existing liabilities before personal liability attaches. As noted above, that window can close before a director has even identified the problem.
Delegating compliance to an accountant or bookkeeper does not remove personal liability. The DPN regime under Division 269 of Schedule 1 to the Taxation Administration Act 1953 (Cth) attaches liability to directors directly. The identity of whoever manages the company’s day-to-day tax compliance is irrelevant. Directors remain personally exposed regardless of internal arrangements.
Keep BAS lodgements current, even when payment is not immediately possible. As explained in the estimation powers section above, late lodgement is what triggers the lockdown mechanism. Engaging the ATO early about a payment arrangement can prevent arrears from escalating, but only where lodgements are up to date. That discipline preserves options that late lodgement permanently removes.
Obtain legal advice promptly. A director who has received a DPN, suspects one may issue, or is aware of historical GST or PAYG arrears should seek independent advice from a taxation lawyer to understand the full scope of personal exposure and what responses remain available. The 21-day window on a remittable DPN runs from the date of postage, not receipt. Delay forfeits options that cannot be recovered.
Key Takeaways for Directors
The practical steps covered above share a common thread: time matters, and the directors who fare worst are those who act after their options have already closed.
The core points to carry forward from this analysis are these:
- GST personal liability has existed since 2012. The DPN regime is not limited to PAYG withholding. Every director of a company with unpaid GST arrears faces potential personal liability, whether or not they were aware of that exposure.
- Lockdown DPNs remove every standard exit. As explained above, voluntary administration and liquidation do not extinguish liability once the lodgement failure has occurred, and the ATO can issue a lockdown DPN even after insolvency proceedings have commenced.
- The formal windows are narrow. New directors have 30 days from appointment to identify and address pre-existing arrears, and the 21-day DPN clock runs from the date of posting. As set out above, once those windows close, the available responses reduce sharply.
- Liability can crystallise faster than expected. The ATO’s estimation powers allow it to assess unpaid GST, PAYG and SGC at any time using Single Touch Payroll data, without waiting for a lodged return. From 1 July 2026, the Payday Super regime compresses SGC liability to the earlier of 60 days after wages are paid or an ATO estimate, eliminating the quarterly buffer directors previously relied upon.
If you are a company director and you are uncertain about your company’s GST or PAYG compliance position, or if you have received a director penalty notice, seek legal advice from a taxation lawyer promptly. Understanding your position before the ATO acts is significantly better than responding after personal liability has already been established. Chris Garlick is a taxation lawyer who advises directors on DPN exposure and ATO disputes. Contact the practice to discuss your circumstances.